[Secure-testing-commits] r19552 - data/CVE

[Joey Hess]

Author: joeyh
Date: 2012-06-21 21:15:11 +0000 (Thu, 21 Jun 2012)
New Revision: 19552

Modified:
   data/CVE/list
Log:
automatic update

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2012-06-21 14:57:57 UTC (rev 19551)
+++ data/CVE/list	2012-06-21 21:15:11 UTC (rev 19552)
@@ -1,3 +1,7 @@
+CVE-2012-3790 (Cross-site scripting (XSS) vulnerability in index.php in Adiscon ...)
+	TODO: check
+CVE-2011-5095 (The Diffie-Hellman key-exchange implementation in OpenSSL 0.9.8, when ...)
+	TODO: check
 CVE-2012-3789
 	RESERVED
 CVE-2012-3788
@@ -1462,8 +1466,8 @@
 	RESERVED
 CVE-2012-3064
 	RESERVED
-CVE-2012-3063
-	RESERVED
+CVE-2012-3063 (Cisco Application Control Engine (ACE) before A4(2.3) and A5 before ...)
+	TODO: check
 CVE-2012-3062
 	RESERVED
 CVE-2012-3061
@@ -1472,8 +1476,8 @@
 	RESERVED
 CVE-2012-3059
 	RESERVED
-CVE-2012-3058
-	RESERVED
+CVE-2012-3058 (Cisco Adaptive Security Appliances (ASA) 5500 series devices, and the ...)
+	TODO: check
 CVE-2012-3057
 	RESERVED
 CVE-2012-3056
@@ -2702,14 +2706,14 @@
 	RESERVED
 CVE-2012-2497
 	RESERVED
-CVE-2012-2496
-	RESERVED
-CVE-2012-2495
-	RESERVED
-CVE-2012-2494
-	RESERVED
-CVE-2012-2493
-	RESERVED
+CVE-2012-2496 (A certain Java applet in the VPN downloader implementation in the ...)
+	TODO: check
+CVE-2012-2495 (The HostScan downloader implementation in Cisco AnyConnect Secure ...)
+	TODO: check
+CVE-2012-2494 (The VPN downloader implementation in the WebLaunch feature in Cisco ...)
+	TODO: check
+CVE-2012-2493 (The VPN downloader implementation in the WebLaunch feature in Cisco ...)
+	TODO: check
 CVE-2012-2492
 	RESERVED
 CVE-2012-2491
@@ -18364,8 +18368,7 @@
 	- tor 0.2.1.30-1
 	[squeeze] - tor <no-dsa> (Only affects the central Tor directory servers)
 	[lenny] - tor <no-dsa> (Only affects the central Tor directory servers)
-CVE-2011-1923 [polarssl MITM]
-	RESERVED
+CVE-2011-1923 (The Diffie-Hellman key-exchange implementation in dhm.c in PolarSSL ...)
 	- polarssl 0.14.3-1 (bug #616114)
 CVE-2011-1922 (daemon/worker.c in Unbound 1.x before 1.4.10, when debugging ...)
 	- unbound 1.4.10-1 (unimportant)